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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

Claim 1 (Currently Amended): A gateway device for carrying out a data relaying at a 
transport or upper layer between a first terminal device and a second terminal device which 
are capable of carrying out communications through networks with data secrecy based on a 
security association set up therebetween , the gateway device comprising: 

a security information management unit configured to obtain and manage information 
regarding a the security association set up betw ee n th e first terminal device and the second 
t e rminal d e vic e in order to carry out communications with guaranteed data secrecy b e tween 
the first t e rminal device and the second terminal device ; 

a data receiving unit confi gured to receive encrypted data from the first terminal 
device or the second terminal device: 

a data decryption unit configured to obtain decrypted data by decrypting the encrypted 
data received from the first terminal device or the second terminal device, by utilizing the 
information regarding the security association at a time of relaying the communications with 
guarant e ed data secrecy between the first terminal device and the second terminal device; 

a data relay unit configured to carry out the data relaying at the transport or upper 
layer according to the decrypted data; and 

a data encryption unit configured to encrypt data to be transmitted from the gateway 
device by utilizing the information regarding the security association ; and 

a data transmitting unit con figured to transmit the encrypted data encrypted bv the 
data encryption unit to the second ter m inal device or the first terminal device, respectively . 
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Claim 2 (Original): The gateway device of claim 1, wherein the gateway device 
carries out the data relaying between the first terminal device which is a radio terminal device 
accommodated in a radio network and the second terminal device which is a wired terminal 
device accommodated in a wired network. 

Claim 3 (Original): The gateway device of claim 1 5 wherein the security information 
management unit manages the information regarding the security association which is 
provided from the first terminal device or the second terminal device. 

Claim 4 (Original): The gateway device of claim 1, wherein the security information 
management unit manages the information regarding the security association which is 
provided from a security server for managing security of the data at a time of carrying out the 
communications of the data of the transport or upper layer between the first terminal device 
and the second terminal device. 

Claim 5 (Original): The gateway device of claim 1, wherein the security information 
management unit manages the information regarding the security association which is 
generated by a security server for managing security of the data and distributed from the 
security server to the first terminal device and the second terminal device. 

Claim 6 (Original): The gateway device of claim 1, wherein the security information 
management unit manages the information regarding the security association which is 
retrieved from a database by a security server for managing security of the data by using a 
retrieval key provided with respect to the first terminal device and the second terminal 
device. 
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Claim 7 (Original): The gateway device of claim 1, wherein the first terminal device 
is a mobile terminal device, and the gateway device further comprises: 

a handoff control unit configured to transfer the information regarding the security 
association to a next gateway device when the first terminal moves from an area covered by 
the gateway device to an area covered by the next gateway device, and to control an 
operation of the gateway device according to the information regarding the security 
association which is transferred from a previous gateway device when the first terminal 
moves from an area of the previous gateway device to an area covered by the gateway device. 

Claim 8 (Original): The gateway device of claim 7, wherein the handoff control unit 
controls the operation of the gateway device also according to a state of the transport or upper 
layer. 

Claim 9 (Original): The gateway device of claim 1, further comprising: 
a processing unit configured to obtain decapsulated data by decapsulating 
encapsulated data received from the first terminal device or the second terminal device, judge 
whether the data relaying at the transport or upper layer is necessary or not according to the 
decapsulated data, control the data relay unit to carry out the data relaying at the transport or 
upper layer when the data relaying at the transport or upper layer is judged as necessary, and 
encrypt data to be transmitted from the gateway device. 

Claim 10 (Currently Amended): A gateway device for carrying out a data relaying at 
a transport or upper layer between a first terminal device and a second terminal device which 
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are capable of carrying out communications through networks with data authenticity based on 
a security association set up therebetween , the gateway device comprising: 

a security information management unit configured to obtain and manage information 
regarding a the security association s e t up b e tw ee n th e firot terminal dovice and th e s e cond 
terminal d e vice in ord e r to carry out communications with guaranteed data auth e nticity 
b e tw ee n th e first terminal device and th e s e cond t e rminal device ; 

a data receiving unit configured to receive data from the first terminal device or the 
second terminal device; 

a data relay unit configured to carry out the data relaying at the transport or upper 
layer according to the received data : and 

an authentication information attaching unit configured to attach authentication 
information to data to be transmitted from the gateway device by utilizing the information 
regarding the security association ; and 

a data transmitting unit c onfigured to transmit the data with the authentication 
i nformation to the second terminal device or the first terminal device, respectively . 

Claim 1 1 (Original): The gateway device of claim 10, wherein the gateway device 
carries out the data relaying between the first terminal device which is a radio terminal device 
accommodated in a radio network and the second terminal device which is a wired terminal 
device accommodated in a wired network. 

Claim 12 (Original): The gateway device of claim 10, wherein the security 
information management unit manages the information regarding the security association 
which is provided from the first terminal device or the second terminal device. 
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Claim 13 (Original): The gateway device of claim 10, wherein the security 
information management unit manages the information regarding the security association 
which is provided from a security server for managing security of the data at a time of 
carrying out the communications of the data of the transport or upper layer between the first 
terminal device and the second terminal device. 

Claim 14 (Original): The gateway device of claim 10, wherein the security 
information management unit manages the information regarding the security association 
which is generated by a security server for managing security of the data and distributed from 
the security server to the first terminal device and the second terminal device. 

Claim 15 (Original): The gateway device of claim 10, wherein the security 
information management unit manages the information regarding the security association 
which is retrieved from a database by a security server for managing security of the data by 
using a retrieval key provided with respect to the first terminal device and the second 
terminal device. 

Claim 16 (Original): The gateway device of claim 10, wherein the first terminal 
device is a mobile terminal device, and the gateway device further comprises: 

a handoff control unit configured to transfer the information regarding the security 
association to a next gateway device when the first terminal moves from an area covered by 
the gateway device to an area covered by the next gateway device, and to control an 
operation of the gateway device according to the information regarding the security 
association which is transferred from a previous gateway device when the first terminal 
moves from an area of the previous gateway device to an area covered by the gateway device. 
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Claim 17 (Original): The gateway device of claim 16, wherein the handoff control 
unit controls the operation of the gateway device also according to a state of the transport or 
upper layer. 

Claim 18 (Original): The gateway device of claim 10, further comprising: 
a processing unit configured to obtain decapsulated data by decapsulating 
encapsulated data received from the first terminal device or the second terminal device, judge 
whether the data relaying at the transport or upper layer is necessary or not according to the 
decapsulated data, control the data relay unit to carry out the data relaying at the transport or 
upper layer when the data relaying at the transport or upper layer is judged as necessary, and 
encrypt data to be transmitted from the gateway device. 

Claim 19 (Currently Amended): A method for carrying out a data relaying at a 
transport or upper layer in a gateway device between a first terminal device and a second 
terminal device which are capable of carrying out communications through networks with 
data secrecy based on a security as sociation set up therebetween , the method comprising; 

obtaining and managing information regarding a security association set up between 
the first terminal device and tho second terminal device in ord e r to carry out communications 
with guarante e d data secrecy between the first terminal device and the second terminal 
device ; 

receiving encrypted data from the first terminal device or the second terminal device: 
obtaining decrypted data by decrypting the encrypted data received from tho first 
t e rminal device or tho second terminal device, by utilizing the information regarding the 
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security association at a time of relaying the communications with guarant ee d data secrecy 
between the first terminal device and the second terminal device; 

carrying out the data relaying at the transport or upper layer according to the 
decrypted data; and 

encrypting data to be transmitted from the gateway device by utilizing the information 
regarding the security association ; and 

transmitting the encrypted data to the second terminal device or the first terminal 
device, respectively . 

Claim 20 (Currently Amended): A method for carrying out a data relaying at a 
transport or upper layer in a gateway device between a first terminal device and a second 
terminal device which are capable of carrying out communications through networks with 
data authenticity bas ed on a security association set up therebetween , the method comprising: 

obtaining and managing information regarding a the security association s e tup 
b e tw e en the first terminal device and the second terminal d e vice in order to carry out 
communications with guaranteed data authenticity between the first terminal device and the 
s e cond t e rminal device ; 

receiving dat a from the first terminal device or the second terminal device: 

carrying out the data relaying at the transport or upper layer according to the received 
data ; and 

attaching authentication information to data to be transmitted from the gateway device 
by utilizing the information regarding the security associatio n; and 

transmitting the data wi th the authentication information to the second terminal device 
or the first terminal device, respectively . 
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Claim 21 (Currently Amended): A computer usable medium having computer 
readable program codes embodied therein for causing a computer to function as a 
gateway device for carrying out a data relaying at a transport or upper layer between a first 
terminal device and a second terminal device which are capable of carrying out 
communications through networks with data secrecy based on a security association set up 
therebetween , the computer readable program codes include: 

a first computer readable program code for causing said computer to obtain and 
manage information regarding a security association s e t up betw ee n th e first terminal d e vice 
and th e s e cond t e rminal device in order to carry out communications with guaranteed data 
s e cr e cy b e tw ee n th e first terminal device and the s e cond terminal devic e; 

a second computer readable program code for causing said computer to receive 
encrypte d data from the first terminal device or the second terminal device: 

a s e cond third computer readable program code for causing said computer to obtain 
decrypted data by decrypting the encrypted data r e ceived from the first terminal devic e or the 
s e cond terminal device, by utilizing the information regarding the security association at a 
time of relaying the communications with guarante e d data secrecy between the first terminal 
device and the second terminal device; 

a thifd fourth computer readable program code for causing said computer to carry out 
the data relaying at the transport or upper layer according to the decrypted data; a&4 

a fourth fifth computer readable program code for causing said computer to encrypt 
data to be transmitted from the gateway device by utilizing the information regarding the 
security association ; and 

a sixth computer readable program code for causing said computer to transmit the 
encr ypted data to the second terminal device or the first terminal device, respectively . 
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Claim 22 (Currently Amended): A computer usable medium having computer 
readable program codes embodied therein for causing a computer to function as a gateway 
device for carrying out a data relaying at a transport or upper layer between a first terminal 
device and a second terminal device which are capable of carrying out communications 
through networks with data authenticity based on a security association set up therebetween , 
the computer readable program codes include: 

a first computer readable program code for causing said computer to obtain and 
manage information regarding a the security association sot up betw ee n tho first t e rminal 
d e vic e and th e second t e rminal device in ord e r to carry out communications with guaranteed 
data authenticity betw ee n the first t e rminal device and tho second terminal d e vice ; 

a second computer rea dable program code for causing said computer to receive data 
from the first terminal device or the second terminal device: 

a s e cond third computer readable program code for causing said computer to carry 
out the data relaying at the transport or upper layer according to the received data : and 

a third fourth computer readable program code for causing said computer to attach 
authentication information to data to be transmitted from the gateway device by utilizing the 
information regarding the security association ; and 

a fifth com puter readable program code for causing said computer to transmit the data 
with the authentication information to the second terminal device or the first terminal devine 1 
respectively . 
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